Untitled
unknown
plain_text
a year ago
5.6 kB
4
Indexable
:000> uf kool_ade!FileMove kool_ade!FileMove: 00007ffa`ff92d760 48895c2408 mov qword ptr [rsp+8],rbx 00007ffa`ff92d765 4889742410 mov qword ptr [rsp+10h],rsi 00007ffa`ff92d76a 57 push rdi 00007ffa`ff92d76b 4881ec70010000 sub rsp,170h 00007ffa`ff92d772 488bda mov rbx,rdx 00007ffa`ff92d775 488bf9 mov rdi,rcx 00007ffa`ff92d778 488bcb mov rcx,rbx 00007ffa`ff92d77b 488d542420 lea rdx,[rsp+20h] 00007ffa`ff92d780 418bf0 mov esi,r8d 00007ffa`ff92d783 ff1537910500 call qword ptr [kool_ade!Gs::SharedMemUnlock+0xc1f0 (00007ffa`ff9868c0)] 00007ffa`ff92d789 85c0 test eax,eax 00007ffa`ff92d78b 757c jne kool_ade!FileMove+0xa9 (00007ffa`ff92d809) Branch kool_ade!FileMove+0x2d: 00007ffa`ff92d78d b800400000 mov eax,4000h 00007ffa`ff92d792 6685442426 test word ptr [rsp+26h],ax 00007ffa`ff92d797 7470 je kool_ade!FileMove+0xa9 (00007ffa`ff92d809) Branch kool_ade!FileMove+0x39: 00007ffa`ff92d799 ba2f000000 mov edx,2Fh 00007ffa`ff92d79e 488bcf mov rcx,rdi 00007ffa`ff92d7a1 e83c200500 call kool_ade!Gs::SharedMemUnlock+0x5112 (00007ffa`ff97f7e2) 00007ffa`ff92d7a6 4885c0 test rax,rax 00007ffa`ff92d7a9 7535 jne kool_ade!FileMove+0x80 (00007ffa`ff92d7e0) Branch kool_ade!FileMove+0x4b: 00007ffa`ff92d7ab 8d505c lea edx,[rax+5Ch] 00007ffa`ff92d7ae 488bcf mov rcx,rdi 00007ffa`ff92d7b1 e82c200500 call kool_ade!Gs::SharedMemUnlock+0x5112 (00007ffa`ff97f7e2) 00007ffa`ff92d7b6 4885c0 test rax,rax 00007ffa`ff92d7b9 7525 jne kool_ade!FileMove+0x80 (00007ffa`ff92d7e0) Branch kool_ade!FileMove+0x5b: 00007ffa`ff92d7bb 488d542460 lea rdx,[rsp+60h] 00007ffa`ff92d7c0 488bcb mov rcx,rbx 00007ffa`ff92d7c3 482bd3 sub rdx,rbx 00007ffa`ff92d7c6 66660f1f840000000000 nop word ptr [rax+rax] kool_ade!FileMove+0x70: 00007ffa`ff92d7d0 0fb601 movzx eax,byte ptr [rcx] 00007ffa`ff92d7d3 88040a mov byte ptr [rdx+rcx],al 00007ffa`ff92d7d6 488d4901 lea rcx,[rcx+1] 00007ffa`ff92d7da 84c0 test al,al 00007ffa`ff92d7dc 75f2 jne kool_ade!FileMove+0x70 (00007ffa`ff92d7d0) Branch kool_ade!FileMove+0x7e: 00007ffa`ff92d7de eb4e jmp kool_ade!FileMove+0xce (00007ffa`ff92d82e) Branch kool_ade!FileMove+0x80: 00007ffa`ff92d7e0 4c8bc8 mov r9,rax 00007ffa`ff92d7e3 488d15cad00500 lea rdx,[kool_ade!GS_IS_6010_6323264+0xb64 (00007ffa`ff98a8b4)] 00007ffa`ff92d7ea 4c8bc3 mov r8,rbx 00007ffa`ff92d7ed 488d4c2460 lea rcx,[rsp+60h] 00007ffa`ff92d7f2 e8299affff call kool_ade!WebdatDebugStr+0xe0 (00007ffa`ff927220) 00007ffa`ff92d7f7 488d542420 lea rdx,[rsp+20h] 00007ffa`ff92d7fc 488d4c2460 lea rcx,[rsp+60h] 00007ffa`ff92d801 ff15b9900500 call qword ptr [kool_ade!Gs::SharedMemUnlock+0xc1f0 (00007ffa`ff9868c0)] 00007ffa`ff92d807 eb25 jmp kool_ade!FileMove+0xce (00007ffa`ff92d82e) Branch kool_ade!FileMove+0xa9: 00007ffa`ff92d809 488d542460 lea rdx,[rsp+60h] 00007ffa`ff92d80e 488bcb mov rcx,rbx 00007ffa`ff92d811 482bd3 sub rdx,rbx 00007ffa`ff92d814 0f1f4000 nop dword ptr [rax] 00007ffa`ff92d818 0f1f840000000000 nop dword ptr [rax+rax] kool_ade!FileMove+0xc0: 00007ffa`ff92d820 0fb601 movzx eax,byte ptr [rcx] 00007ffa`ff92d823 88040a mov byte ptr [rdx+rcx],al 00007ffa`ff92d826 488d4901 lea rcx,[rcx+1] 00007ffa`ff92d82a 84c0 test al,al 00007ffa`ff92d82c 75f2 jne kool_ade!FileMove+0xc0 (00007ffa`ff92d820) Branch kool_ade!FileMove+0xce: 00007ffa`ff92d82e 4533c0 xor r8d,r8d 00007ffa`ff92d831 488d542460 lea rdx,[rsp+60h] 00007ffa`ff92d836 85f6 test esi,esi 00007ffa`ff92d838 488bcf mov rcx,rdi 00007ffa`ff92d83b 410f95c0 setne r8b 00007ffa`ff92d83f 4183c002 add r8d,2 00007ffa`ff92d843 ff15c78a0500 call qword ptr [kool_ade!Gs::SharedMemUnlock+0xbc40 (00007ffa`ff986310)] 00007ffa`ff92d849 85c0 test eax,eax 00007ffa`ff92d84b 7407 je kool_ade!FileMove+0xf4 (00007ffa`ff92d854) Branch kool_ade!FileMove+0xed: 00007ffa`ff92d84d b801000000 mov eax,1 00007ffa`ff92d852 eb20 jmp kool_ade!FileMove+0x114 (00007ffa`ff92d874) Branch kool_ade!FileMove+0xf4: 00007ffa`ff92d854 ff15f68a0500 call qword ptr [kool_ade!Gs::SharedMemUnlock+0xbc80 (00007ffa`ff986350)] 00007ffa`ff92d85a 8bc8 mov ecx,eax 00007ffa`ff92d85c e8ef150000 call kool_ade!ErrWindows (00007ffa`ff92ee50) 00007ffa`ff92d861 4c8bc3 mov r8,rbx 00007ffa`ff92d864 488d0d55d00500 lea rcx,[kool_ade!GS_IS_6010_6323264+0xb70 (00007ffa`ff98a8c0)] 00007ffa`ff92d86b 488bd7 mov rdx,rdi 00007ffa`ff92d86e ff15b4930500 call qword ptr [kool_ade!Gs::SharedMemUnlock+0xc558 (00007ffa`ff986c28)] kool_ade!FileMove+0x114: 00007ffa`ff92d874 4c8d9c2470010000 lea r11,[rsp+170h] 00007ffa`ff92d87c 498b5b10 mov rbx,qword ptr [r11+10h] 00007ffa`ff92d880 498b7318 mov rsi,qword ptr [r11+18h] 00007ffa`ff92d884 498be3 mov rsp,r11 00007ffa`ff92d887 5f pop rdi 00007ffa`ff92d888 c3 ret
Editor is loading...
Leave a Comment